WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

Create professional client photo galleries and photo proofing galleries for your photography business. Sell photos directly to clients with zero commi …

24Reported vulnerabilities
9.8Highest CVSS score
3.6.12Latest version
1,000+Active installs

What to do now

Update Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers to 3.6.12 or later. 24 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-4301 Medium 6.1 0.9% Before 2.9.15 2.9.15 January 9, 2023
CVE-2025-31084 Critical 9.8 0.7% 3.4.10 and earlier 3.4.11 March 28, 2025
CVE-2024-30221 Critical 9.8 0.5% 3.1.1 and earlier 3.1.2 March 26, 2024
CVE-2025-5482 High 8.8 0.6% Before 3.4.12 3.4.12 June 4, 2025
CVE-2022-40692 High 8.8 0.3% 2.9.13 and earlier 2.9.14 December 2, 2022
CVE-2024-43971 Medium 6.1 0.6% 3.2.5 and earlier 3.2.6 August 28, 2024
CVE-2024-30194 Medium 6.1 0.7% 3.1.1 and earlier 3.1.2 March 25, 2024
CVE-2022-45826 Medium 6.3 0.4% 2.9.13 and earlier 2.9.14 December 2, 2022
CVE-2024-50463 Medium 6.1 0.3% 3.2.9 and earlier 3.2.11 October 24, 2024
CVE-2024-1294 Medium 5.3 0.7% Before 3.1 3.1 February 29, 2024
CVE-2026-16561 Medium 5.3 0.3% 3.6.11 and earlier 3.6.12 July 27, 2026
CVE-2026-39564 Medium 5.3 0.2% Before 3.6.2 3.6.2 March 26, 2026
CVE-2025-67973 Medium 5.3 0.2% 3.5.6.2 and earlier 3.5.7.1 January 27, 2026
CVE-2026-24994 Medium 5.3 0.2% 3.5.7.2 and earlier 3.5.7.3 January 23, 2026
CVE-2025-62892 Medium 5.3 0.3% 3.5.3 and earlier 3.5.4 August 29, 2025
CVE-2024-44038 Medium 5.3 0.4% 3.2.9 and earlier 3.2.10 September 23, 2024
CVE-2023-41796 Medium 5.3 0.4% 2.9.25 and earlier 3.0 September 5, 2023
CVE-2026-57703 Medium 4.3 0.3% 3.6.10.1 and earlier 3.6.11 July 20, 2026
CVE-2026-42776 Medium 4.3 0.2% 3.6.7 and earlier 3.6.8 May 26, 2026
CVE-2025-68535 Medium 4.3 0.2% 3.5.7.1 and earlier 3.5.7.2 December 30, 2025
CVE-2024-49697 Medium 4.3 0.4% 3.2.9 and earlier 3.2.10 October 21, 2024
CVE-2024-47314 Medium 4.3 0.4% 3.2.8 and earlier 3.2.9 September 25, 2024
CVE-2024-43136 Medium 4.3 0.4% 3.2.1 and earlier 3.2.2 August 7, 2024
CVE-2021-4415 Medium 4.3 0.4% 2.8.28 and earlier 2.8.29 July 12, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.